Privacy
Koupir is built to know as little as possible about you: no account, no name, no phone number, no cookie.
What Koupir keeps
- A device id, drawn at random on your phone. The server keeps only a fingerprint of it, computed with a secret key: it cannot get the id back.
- Your “where I live” locality, if you choose one: for your notifications and your “Neighbour from” name.
- What you post: alerts, “still cut off” and “it is back”, messages, ideas, votes, flags. The place is the locality or, if you choose one for an alert, a named street or public place you pick from the list: never your position or your address.
- Your notification subscription, if you turn notifications on: the address your browser gives, what you chose to receive, your language.
- A fingerprint of your network, computed with a key drawn every day then destroyed, to count distinct witnesses and curb abuse. Your IP address is never recorded. To post, your connection must come from Mauritius: Cloudflare tells us its country for the time of the request, and it is not kept.
No name, no phone, no e-mail, no IP address, no GPS position. No cookie, no ads, no tracker. Audience is measured with Cloudflare Web Analytics, without cookies or profiles (page views and device types, nothing that follows you from one site to another).
A takedown request keeps the name or organisation of the requester and, if given, their e-mail address, in the log of requests the law requires.
Why
To show alerts and their threads, count the neighbours who confirm, send you the notifications you asked for, prevent abuse, and handle takedown requests (a legal obligation).
How long
- The link between your device and your alerts, reports, messages and ideas
- 30 days
- Your network fingerprint
- 30 days
- An alert’s message thread
- 30 days after its last update
- The logs of the official sources
- 30 days
- A takedown requester’s e-mail
- 1 year
- A notification subscription
- until you turn it off
After that, only anonymous content and figures remain. A takedown request stays in the log the law requires. A subscription also ends when your browser refuses it.
Who has access
Koupir is hosted by Cloudflare (servers, database, storage, e-mail), which processes this data on its behalf, in Mauritius and other countries. Before it is published, the text of a message or an idea is read by an automatic filter (Llama Guard, run by Cloudflare). Notifications go, encrypted, through your browser’s service (Google, Apple or Mozilla). Nothing is sold or shared.
On your phone
Koupir keeps in your browser’s local storage, and nowhere else: your device id, “where I live” and its district, the theme and map view you chose, the last cyclone mode state, what you already did (votes, confirmations, flags, messages) to show it, your notification choices, and whether you closed the invitation to install the app. A copy of the pages lets the site open offline.
Your rights
Access, rectification, erasure, objection: without an account, here is how.
- “Where I live” is changed or forgotten from the home page; notifications are turned off from the Notifications page.
- For anything else, for instance erasing a message sooner: contact@koupir.com, with the link of the content.
- You can also complain to the Data Protection Office of Mauritius.
Reset this device
Erases everything Koupir keeps on this phone (id, “where I live”, preferences) and turns its notifications off. Nothing then links this phone to what it posted.
Erase everything on this device? This cannot be undone.
Controller
Koupir, reachable at contact@koupir.com, within the meaning of the Data Protection Act 2017 of Mauritius.
Registration with the Data Protection Office: in progress.